Terra Trips: Travel, Explore, Live!

The processing of personal data is regulated by the European Regulation 2016/679 on the protection of individuals with regard to the processing of personal data and on the free movement of such data (hereinafter referred to as the "Regulation"), a regulation that is directly applicable starting from May 25, 2018.

The main purpose of the Regulation is to increase the level of protection of personal data (of individuals) and create an atmosphere of trust, allowing each individual (natural person) to own and exercise effective, direct, and prompt control over the processing of their own personal data.

We emphasize that the processing of personal data exclusively concerns personal data belonging to natural persons, so this information on the processing of personal data is specifically addressed to natural persons.

  1. Processed Personal Data

Any information related to an identified or identifiable natural person is considered personal data. A person is considered identifiable if identification can be made directly or indirectly, in particular by reference to an identifier such as name, surname, identification number, location data, an online identifier, or one or more specific elements specific to their physical, physiological, genetic, mental, economic, cultural, or social identity. Information that cannot be associated with your identity (such as the number of views of an Offer or other statistical data) is not considered personal data.

The personal data we process primarily include the identification data of individual customers, demographic data, location data, or any other personal data that we collect directly from users/customers or from other sources (controllable or verifiable).

In essence, you can view our Offers without disclosing personal data. However, using the online contact form or subscribing to the newsletter involves the disclosure of personal data. If your personal data have been provided by a third party or have reached Terra Incognita by mistake, you have all the remedies provided by law for the deletion of data.

  1. Purposes of Processing Personal Data

For the processing of personal data to be legal, there must be a satisfactory reason for this processing to take place. These reasons are specified by law and include:

(a) Processing your data to perform a contract.

(b) Processing is necessary to comply with a legal obligation.

(c) Processing is necessary to pursue our legitimate interests as a provider of products/services/travel packages. For example, we may monitor office access to ensure the security of our spaces and information.

Terra Incognita processes personal data exclusively for legitimate purposes, such as providing personalized tourist services (transport, accommodation and meal services, medical insurance, travel insurance, other related services, etc.), communicating offers such as Last Minute and travel promotions (if applicable), transmitting information about new tourist destinations offered by Terra Incognita, providing recommendations and tips on places to spend your vacation or leisure time, for marketing purposes, for the improvement and development of products and services offered by Terra Incognita, for the prevention and combating of fraud or money laundering activities, etc.

The processing of your personal data is done as a result of the execution of contracts concluded with Terra Incognita, the need to comply with a mandatory legal obligation, the realization of our legitimate interest, or a major public interest (such as national defense, public order, or national security), your consent, in the situation where you have expressly expressed this option.

  1. Agreement Management. Possibility of Changing Options

To provide you with personalized services and as close as possible to your interests, we usually process personal data that allow the identification of your preferences and/or behavior, including through automated processes that do not involve human intervention. For this type of processing, including direct marketing communications, we will always take into account your options.

To ensure simple, direct, and easy access, please note that you have the option to check and modify any agreements you have expressed until now, in relation to us, either by accessing our website at www.terra-trips.com, or by sending a request to the address: office@terra-trips.com, or by requesting this in writing, directly, at the Terra Incognita headquarters.

  1. To Whom We Communicate Personal Data

In order to provide services at the highest standards, to fulfill our legal obligations, or for other legitimate purposes, Terra Incognita may transmit your personal data, as appropriate, to public authorities, judicial bodies, external consultants, insurance companies, contractual tour operator partners, other tourism companies, other entities authorized to which we have outsourced the provision of certain services, and other categories of recipients, from Romania or abroad, either from the European Union/European Economic Area or from outside these areas.

Thus, we inform you that we may disclose your personal data to other companies that provide us with services and act as authorized persons, having limited capacity to use personal information.

However, at the time and on the occasion of the transmission/transfer of your personal data, we always ensure, and in a permanent manner, that we establish adequate guarantees for the protection of your personal data by the respective recipients listed above (for example, by establishing and agreeing to standard contractual clauses, implementing and having mandatory corporate rules, etc.).

  1. Secure Processing of Personal Data

We inform you that your personal data will be processed by Terra Incognita, respecting all the rights of the data subjects, as well as by applying immediate, complete, and adequate technical and organizational measures to protect them against unauthorized or unauthorized access.

Such measures may include, but are not limited to, limiting access (by third parties) to processed personal data, encrypting or anonymizing data, storing and/or archiving them in secure environments, etc.

  1. Processing (and Storage) Period of Personal Data

Your data is stored by our means, on specially protected servers. The data is protected by technical and organizational measures that we have taken to prevent unauthorized access, loss, destruction, modification, and unauthorized disclosure. Access to your data is only allowed to a limited number of authorized persons. Authorized persons are responsible for the technical, commercial, or operational management of servers and activities.

In the situation where your data is transmitted over the Internet, we expressly state that it is encrypted to ensure the necessary protection.

Your personal data are processed throughout our contractual relationship, and after its completion, for the period imposed by the applicable legal provisions in the field, including, but not limited to, legal provisions regarding archiving.

  1. Rights of Customers and How to Exercise Them

The rights of customers regarding the processing of personal data are as follows: A. Right to information – you can request information regarding our processing activities of your personal data.

This right includes the following:
(a) the right of access to processed data;
(b) the right to be informed about:
i. the purposes of processing,
ii. the categories of personal data processed,
iii. the data subjects,
iv. recipients or categories of recipients,
v. the intended or fixed storage period,
vi. the source of this data, and, where applicable,
vii. the existence of a processing and automated decision-making process;

B. Right to rectification of data – you can rectify or modify inaccurate personal data or complete it;

C. Right to erasure of data ("right to be forgotten") – you can request and obtain the deletion of data if their processing by us was not legal or in other cases provided by law;

D. Right to restriction of processing – you can request the restriction of processing, if you contest the accuracy of the data, as well as in other cases provided by law;

E. Right to object (to data processing) – you can object, in particular, to data processing based on our legitimate interest;

F. Right to data portability – you can receive, under certain conditions, the personal data you have provided to us in a format that can be automatically read, or you can request that we transmit this data to another operator;

G. Right to lodge a complaint – you can lodge a complaint with the National Authority for the Supervision of Personal Data Processing regarding our processing of your personal data;

H. Right to withdraw consent – in cases where our processing is based on your consent, you can withdraw it at any time. The withdrawal of consent will have effects only for the future, and the processing carried out before the withdrawal will remain valid.

I. Additional rights related to automated decisions: you can request and obtain human intervention in this processing, express your own point of view on it, and contest the decision.

You can exercise, very easily and conveniently, any of these rights (individually or cumulatively, as the case may be) by simply submitting a request to the Terra Incognita headquarters at com. Domnești, Curtea Domneasca Entry no. 4, Ilfov County, Romania, or by email at: contact@terra-trips.com, or by phone at: +40.785.183.772.

In addition, we have appointed a Data Protection Officer whom you can contact by email at: office@terra-trips.com, or by phone at: +40.785.183.772, if you have any uncertainties, questions, or requests regarding any aspect related to the protection of personal data.